Data breach
Lumin PDFluminpdf.com
15 453 048 accounts exposed in a breach dated 2019-04-01.
Breached2019-04-01Added to HIBP2019-09-18 UTCUpdated by HIBP2019-09-18 UTCAccounts15 453 048Domainluminpdf.com
Verified
What happened in Have I Been Pwned’s words
In April 2019, the PDF management service Lumin PDF suffered a data breach. The breach wasn't publicly disclosed until September when 15.5M records of user data appeared for download on a popular hacking forum. The data had been left publicly exposed in a MongoDB instance after which Lumin PDF was allegedly been "contacted multiple times, but ignored all the queries". The exposed data included names, email addresses, genders, spoken language and either a bcrypt password hash or Google auth token.
Exposed data as HIBP classifies it
- Auth tokens
- Email addresses
- Genders
- Names
- Passwords
- Spoken languages
- Usernames
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC